Privacy

Controller

Björn Bösenberg, Finowstraße 17, 10247 Berlin, Germany — email hello@memstead.com (see the imprint). No separate data protection officer is appointed; none is required for processing at this scale (Art. 37 GDPR).

Data processed

memstead.ai serves read-only pages and an MCP endpoint. It sets no cookies, runs no analytics or tracking, and has no user accounts. The hosting provider handling your request processes your IP address and standard request metadata in short-lived server logs, on the legal basis of our legitimate interest in service security, integrity, and abuse prevention (Art. 6(1)(f) GDPR); logs are rotated and not retained long-term.

The interactive demo lets your AI agent write to a throwaway per-session workspace. Whatever your agent submits there is held in memory only, is viewable by anyone holding the session link, and is discarded automatically after roughly 30 minutes of inactivity — nothing is persisted. Do not submit personal data through the demo; processing of what you choose to submit rests on the demo interaction you request (Art. 6(1)(b) GDPR).

Recipients

The service is run on managed hosting infrastructure acting as a processor on our behalf under Art. 28 GDPR. Requests reaching the service traverse the hosting provider's edge. No data is shared with anyone else.

Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise any of these, contact hello@memstead.com. You also have the right to lodge a complaint with a supervisory authority — for Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.